SSL Certificates in IIS 7.5

Related Articles:

This quick guide will show you how to create a CSR in IIS, purchase the
certificate on our site, and install the certificate into your IIS
manager.

First, open the IIS Manager and go to the server certificates section.

On the server certificates page, you will see a list of the current
certificates on your server. In this example, we see the one that was created
by Exchange. The first step in creating an SSL certificate is to create the
Certificate Signing Request (CSR) for your certificate. The CSR contains information
about the certificate such as the Common Name and company. To start the process, click on Create Certificate Request.

Fill out the CSR information boxes (please note they are all required).
In our example, we are creating a CSR for the domain name dyndnsmaps.com.
Once the information is all filled in hit Next to continue.

The default values listed here are fine, so hit Next to continue.

Choose a name and location to save the request. You will need to
locate this file to continue, so save the file to a location you can easily
access. In our example here, the CSR is simply saved to the desktop.

At this point, we're done with IIS for now. Next, we move on to creating and
submitting the CSR to DynDNS.com. Visit our site, log into
your account, go to the Account Summary page and click on SSL Certificates.

In this example account, we have no previous SSL certificates (otherwise there
would be a list of all SSL Certificates that are currently active). To purchase a new
certificate, click on Order SSL Certificate.

For the host name field, enter the Common Name for your certificate and then select which SSL certificate product you
would like to purchase. For more information on the differences, please review our certificate comparison
page. When you're ready to move on click on the continue button.

The next step is to enter your CSR data that you created earlier. To do this
you need to locate your CSR, open the file, and then copy and paste
all of the text into the entry box on our page (including
the ----BEGIN NEW CERTIFICATE REQUEST---- and ----END NEW CERTIFICATE
REQUEST---- lines).

The CSR file will be parsed and its information will be displayed on the
next page. If anything is wrong, you can resubmit the CSR by clicking on
the Replace CSR link. You will also need to choose contacts for the
certificate and which email address will receive the approval email. This
list cannot be edited; you must select one of the addresses from the
list. You can also add alternate Common Names to the certificate for a fee
in this step. (Please note you cannot add alternate CNs at a later
date; they must be included in the original certificate creation process.)

Once you're done, the order will be placed in your shopping cart. After
checkout, an email will be sent to the approver address for you to
complete the purchase. Please follow the instructions in the email you will
receive. Once the process is complete, you will receive a confirmation email
that the certificate is active, and it will be listed as active in your
accounts SSL Certificates page.

To view the finished certificate, click on the listed common name for your
certificate on the SSL Certificates page in your account.

Click on Download Certificate to proceed and select the top option to
view the certificate in your browser.

You will want to select the Server Certificate, then copy the data to
your clipboard by pressing CTRL+C or right clicking your selection and
choosing Copy.

Paste this information into a text editor, such as Notepad
shown in the above screenshot (again including the BEGIN and END lines).

Once the full data is pasted, click File -> Save As. You will
want to save the file as a .cer file type, which is done by simply adding the .cer
file extension to the file name. Please save the file to an
easily-accessible location (in our example, we're saving the file to the Desktop again).

Here we see the server certificate on our desktop below our CSR file.

To install the certificate, go back to the Server Certificates section in
the IIS Manager and choose Complete Certificate Request.

Choose the server certificate you just saved and give the certificate a
name. Ours will be called My SSL Cert. Click OK to finish the process.

Your SSL Certificate is now listed in your Server Certificates list and
can be used for your services.